https://github.com/eset/malware-ioc
Indicators of Compromises (IOC) of our various investigations
https://github.com/eset/malware-ioc
ioc malware misp yara
Last synced: 4 months ago
JSON representation
Indicators of Compromises (IOC) of our various investigations
- Host: GitHub
- URL: https://github.com/eset/malware-ioc
- Owner: eset
- License: bsd-2-clause
- Created: 2014-03-13T14:48:04.000Z (almost 12 years ago)
- Default Branch: master
- Last Pushed: 2025-10-02T09:00:02.000Z (4 months ago)
- Last Synced: 2025-10-02T11:11:34.650Z (4 months ago)
- Topics: ioc, malware, misp, yara
- Language: YARA
- Homepage: https://www.welivesecurity.com
- Size: 1.86 MB
- Stars: 1,851
- Watchers: 231
- Forks: 275
- Open Issues: 0
-
Metadata Files:
- Readme: README.adoc
- License: LICENSE
Awesome Lists containing this project
- awesome-iocs - eset/malware-ioc - Indicators of Compromises (IOC) of our various investigations. (IOCs / Indicators)
- awesome-lists - ESET Research IOC
- awesome-rainmana - eset/malware-ioc - Indicators of Compromises (IOC) of our various investigations (YARA)
- awesome-security-collection - **653**星
- awesome-csirt - malware-ioc
- awesome-cybersecurity-blueteam - ESET's Malware IoCs - Indicators of Compromises (IOCs) derived from ESET's various investigations. (Threat intelligence / Threat signature packages and collections)
README
Malware Indicators of Compromise
================================
.-------------.
( E S | E T ) R e s e a r c h
`-------------'
Copyright (C) ESET 2014-2020
Here are indicators of compromise (IOCs) of our various investigations. We are
doing this to help the broader security community fight malware wherever it
might be.
* `.yar` files are http://plusvic.github.io/yara/[Yara] rules
* `.rules` files are http://snort.org/[Snort] rules
* `samples.md5`, `samples.sha1` and `samples.sha256` files are newline
separated list of hexadecimal digests of malware samples
If you would like to contribute improved versions please send us a pull
request.
If you've found false positives give us the details in an issue report and
we'll try to improve our IOCs.
These are licensed under the permissive BSD two-clause license. You are
allowed to modify these and keep the changes to yourself even though it would
be rude to do so.